🚨 EUVD-2026-44942

📊 Score: 8.6/10 (CVSS v3.1)
📦 Product: simplechat
🏢 Vendor: Microsoft
📅 Updated: 2026-07-16

📝 SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.241.206, several plugin validation routes in application/single_app/plugin_validation_endpoint.py, including `POST /api/...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44942

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-44940

📊 Score: 7.5/10 (CVSS v3.1)
📦 Product: prompty
🏢 Vendor: Microsoft
📅 Updated: 2026-07-16

📝 Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Prompty loaders expanded ${file:...} references in .prompty frontmatter without enforcing that resolved paths stayed within the prompt directory or allowed roots, allowing...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44940

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-44939

📊 Score: 8.7/10 (CVSS v3.1)
📦 Product: prompty
🏢 Vendor: Microsoft
📅 Updated: 2026-07-16

📝 Prompty is a markdown file format (.prompty) for LLM prompts. From 2.0.0-alpha.1 until 2.0.0-beta.3, the @prompty/core TypeScript loader in runtime/typescript/packages/core/src/core/loader.ts used gray-matter without overriding executable js and javascript...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44939

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-44936

📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: kiota
🏢 Vendor: Microsoft
📅 Updated: 2026-07-16

📝 Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, Kiota emitted x-ms-kiota-info clientClassName and clientNamespaceName values without identifier or path sanitization as both generated client class or namespace names and generated output...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44936

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-44934

📊 Score: n/a
📦 Product: sglang
🏢 Vendor: SGLang
📅 Updated: 2026-07-16

📝 SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authentication or deserialization safeguards, allowing an attacker to provide a malicious pickle file that results in unauthenticated remot...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44934

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-44933

📊 Score: 9.3/10 (CVSS v3.1)
📦 Product: kiota
🏢 Vendor: Microsoft
📅 Updated: 2026-07-16

📝 Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, `kiota info` read x-ms-kiota-info.languagesInformation.<language>.dependencyInstallCommand plus dependency name and version values from an OpenAPI description and presented the spec-suppl...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44933

#cybersecurity #infosec #euvd #cve #vulnerability

Security configuration shouldn't have to be rewritten every time an application changes. AIWAF analyzes application source code to automatically identify routes, authentication, forms, APIs, and payloads, providing the context needed for smarter application security.

#ApplicationSecurity #DevSecOps #CyberSecurity #OpenSource #AST #WebDevelopment

New by me: Tech Support Is Mostly Trust Support

https://www.kylereddoch.me/blog/tech-support-is-mostly-trust-support/

#TechSupport #DigitalSafety #Cybersecurity #InfoSec #IT

Track satellites with SkyOSINT

Read this guide to get started https://hackers-arise.com/open-source-intelligence-osint-tracking-satellites-with-skyosint/
#osint #cybersecurity #satellites

Rare LG Ultragear deal slashes 33% off this 45-inch curved OLED gaming monitor

LG's 45-inch UltraGear OLED drops to $1,349.99 at Amazon, a rare 33% off deal on this 5K2K ultrawide gaming monitor.

https://www.androidauthority.com/lg-45-inch-ultragear-5k2k-curved-gaming-monitor-deal-3688340/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

CISA has mandated federal agencies patch a critical Oracle E-Business Suite flaw (CVE-2026-46817) by Saturday. This unauthenticated remote code execution vulnerability, affecting Oracle Payments, is already being actively exploited. The directive highlights a recurring problem: complex, legacy enterprise systems like EBS often remain unpatched for months, even years, until active exploitation forces…

https://www.tpp.blog/4ejiw93

#cybersecurity #cisa #oracle

🤖 This post was AI-generated.

📣🚨 A new and active #OkoBot malware campaign is abusing the ClickFix tactic and fake GitHub repos to trick users into installing fake browser extensions that steal personal and crypto wallet data.

Listen to or read this news: https://hackread.com/okobot-malware-clickfix-browser-extensions-crypto-data/

#CyberSecurity #Malware #ClickFix #Crypto #Scam

Your favorite Tile trackers are picking up a Disney-themed glow-up

Life360 is giving its Tile trackers a visual refresh courtesy of its Disney collaboration.

https://www.androidauthority.com/disney-tile-tracker-launch-3688095/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Possible Phishing 🎣
on: ⚠️hxxps[:]//tanvi-gupta-cmd[.]github[.]io/internspark-project/
🧬 Analysis at: https://urldna.io/scan/6a58b9c43b7750000587985e
#cybersecurity #phishing #infosec #urldna #scam #infosec

What are 'context bombs'? Get familiar with the new cybersecurity tool. | Mashable https://mashable.com/tech/context-bombs-cybersecurity-tool-stop-ai-hacking-agents #cybersecurity #malicious #AgenticAI #defense

South Korean police uncovered a massive GitHub token leak exposing over 500 accounts. Discover the global impact and crucial security recommendations.

#Cybersecurity #GitHub #DataBreach #SouthKorea

https://meterpreter.org/github-token-leak-uncovered/?utm_source=mastodon&utm_medium=jetpack_social

OnePlus officially gives up on the US and Europe

The OnePlus 15 was the company’s final US flagship. | Photo: Allison Johnson / The Verge OnePlus has confirmed what industry observers have long expected: it's quitting the US and European markets, and will no longer la…

https://www.theverge.com/tech/966404/oneplus-oppo-us-europe-withdrawal-realme

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

SonicWall SMA1000 vulnerability CVE-2026-15409 (CVSS 10.0) is exploited in the wild. Public PoC enables remote code execution patch now.

#SonicWall #SMA1000 #CVE202615409 #RCE #ZeroDay #CyberSecurity

https://securityonline.info/sonicwall-sma1000-vulnerability-cve-2026-15409/?utm_source=mastodon&utm_medium=jetpack_social

📱 Most conversations now happen through messaging apps.

Have you ever wondered how monitoring smartphones manage chats, notifications, cloud backups, and social media?

✨ In this article you'll discover:
📩 How message monitoring works
🔔 The role of push notifications
☁️ Cloud synchronization
💬 WhatsApp, Telegram, Messenger & Instagram
📱 Remote communication management
🌐 Social media monitoring

https://www.endoacustica.com/blogen/2026/06/24/how-chat-and-social-media-monitoring-works-on-a-monitoring-smartphone/

#Endoacustica #SmartphoneMonitoring #MobileTechnology #CyberSecurity

COMPUTER COPS: Inside the big business of selling AI to the police

I stood before a hulking glass and brick structure in the heart of Fort Worth, Texas. Thousands gathered inside to see what had been billed as "the future of policing in the digital age." As press, I was prohibited from…

https://www.theverge.com/ai-artificial-intelligence/965066/ai-police-cops

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Possible Phishing 🎣
on: ⚠️hxxps[:]//gmxdhfdkjf[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a5897663b775000058793ff
#cybersecurity #phishing #infosec #urldna #scam #infosec

#SonicWall warns of #SMA1000 flaws exploited in zero-day attacks, patch now

https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-sma1000-flaws-exploited-in-zero-day-attacks-patch-now/

#cybersecurity

🚨 EUVD-2026-44908

📊 Score: 8.2/10 (CVSS v3.1)
📦 Product: DFXServer
🏢 Vendor: HCL Software
📅 Updated: 2026-07-16

📝 HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44908

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-44907

📊 Score: 8.2/10 (CVSS v3.1)
📦 Product: DFXServer
🏢 Vendor: HCL Software
📅 Updated: 2026-07-16

📝 HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing the...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44907

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-44906

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: DFXServer
🏢 Vendor: HCL Software
📅 Updated: 2026-07-16

📝 HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another browser. This allows any network user to invoke these APIs and interact ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44906

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-44905

📊 Score: 6.3/10 (CVSS v3.1)
📦 Product: DFXServer
🏢 Vendor: HCLSoftware
📅 Updated: 2026-07-16

📝 HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44905

#cybersecurity #infosec #euvd #cve #vulnerability

New on the FIRST blog: Ken van Wyk, FIRST Member & President and Principal Consultant, KRvW Associates, LLC and #FIRSTCON26 speaker, and Elliott Atkins, FIRST Liaison & Founder and Managing Director, Exercise3 Limited, on the most common incident response problems they've directly observed across hundreds of operations and exercises.
Most #IncidentResponse teams have the technical chops and business knowledge to get the job done. So why do IR operations still go sideways?

Two independent data sets, isolated from one another, revealed strikingly similar problems:

📄 IRPs too dense for anyone to actually use in a crisis
⚠️ Process errors made under pressure: evidence handling, cost tracking, insurance compliance
📊 Severity triage that doesn't reflect real business impact
🧭 Unclear decision authority when it matters most
👤 Key personnel unavailable, with no backup empowered to act
🗣️ Discussions that never resolve into an actual decision
✅ Actions assigned but never tracked
📢 Communication breakdowns, especially with non-technical stakeholders

Read more: https://go.first.org/nqUbz

#cybersecurity

Apache IoTDB fixes five flaws in its time-series database, including privilege escalation and an unauthenticated DoS. Upgrade to 2.0.10 now.

#ApacheIoTDB #IoT #CVE #Vulnerability #CyberSecurity

https://securityonline.info/apache-iotdb-vulnerabilities-2/?utm_source=mastodon&utm_medium=jetpack_social

Adobe: 1,915 CVEs, 10 CISA KEV exploited in wild. 94% unpatched. Trust Score: C. Attackers love your PDFs. Update Acrobat now. #Adobe #infosec #cybersecurity

https://www.valtersit.com/vendors/adobe/

Discover how autonomous AI cyber attacks orchestrate entire hacks. Read the latest Check Point research detailing this dangerous shift in network security.

#Cybersecurity #ArtificialIntelligence #CheckPoint #CyberAttacks

https://meterpreter.org/autonomous-ai-cyber-attacks/?utm_source=mastodon&utm_medium=jetpack_social

Rival AI assistants could soon gain full access to Android features

The EU has mandated Google to open up Android to competing AI assistants.

https://www.androidauthority.com/eu-android-ai-google-search-mandates-3688186/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Identity Attacks Overtake Exploits as Top Ransomware Cause
🔗 https://www.darkreading.com/identity-access-management-security/identity-attacks-overtake-exploits-top-ransomware-cause

Email attacks overtook exploits as the top ransomware root cause last year. Multifactor authentication (MFA) was deployed in 97% of credential-based attacks but failed to prevent

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Cursor IDE Auto-Executes Malicious Code in Poisoned Repos
🔗 https://www.darkreading.com/application-security/cursor-ide-malicious-code-poisoned-repos

Researchers reported the vulnerability to Cursor in December, but it still remains in the popular AI coding platform and can be exploited in poisoned repository attacks.

Discover how VeriChat AI revolutionizes hardware backdoor detection by analyzing microchip designs and uncovering hidden silicon threats.

#Cybersecurity #HardwareSecurity #AI #VeriChat

https://meterpreter.org/hardware-backdoor-detection-verichat/?utm_source=mastodon&utm_medium=jetpack_social

☕ CYBERBRIEFING — Giovedì 16 luglio 2026

👉 Leggi tutti gli aggiornamenti delle ultime 24 ore:
https://ilpuntocyber.rfeed.it/article.php?s=2026-07-16

#newsletter #cybersecurity
@informatica

Bixby just stopped talking to some Galaxy phone users, and Samsung can’t say why

Bixby is choosing to work silently, and no one knows why.

https://www.androidauthority.com/bixby-voice-commands-not-working-3688065/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Researcher Candice Odgers argues evidence does not support social media as the main driver of rising youth mental health problems or blanket platform bans. 📱
She advocates stronger platform accountability and targeted protections, while warning bans may push teens toward less transparent online spaces. 🔍

🔗 https://www.theguardian.com/society/2026/jul/16/psychologist-candice-odgers-kids-tech-mental-health-social-media-bans

#TechNews #SocialMedia #MentalHealth #OnlineSafety #Youth #Privacy #DigitalRights #Technology #Research #Cybersecurity #Policy #Education #OpenWeb

The US House passed the KIDS Act, a bill that would introduce internet age-gating measures aimed at protecting minors online. 🏛️
EFF argues the proposal would expand online surveillance instead of privacy protections, with broader implications for anonymity and the open web. 🔒

@eff

🔗 https://www.eff.org/deeplinks/2026/07/dont-let-congress-age-gate-internet-effector-3813

#TechNews #Kids #KIDSAct #Children #Privacy #AgeVerification #Surveillance #DigitalRights #FreeSpeech #Cybersecurity #Technology #OpenWeb #Policy #Security #EFF

Intel's EMIB packaging gains traction as chip designers look to skirt TSMC's CoWoS constraints — Google's reported decision for 9th-gen TPUs highlights Intel's att…

Google has reportedly chosen Intel's EMIB-T over TSMC's CoWoS-L for its next-generation TPU, codenamed Humufish. But will Google be alone in its alleged decision?

https://www.tomshardware.com/tech-industry/semiconductors/intels-emib-packaging-gains-traction-as-chip-designers-look-to-skirt-tsmcs-cowos-constraints-googles-reported-decision-for-9th-gen-tpus-highlights-intels-attractive-alternative

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Possible Phishing 🎣
on: ⚠️hxxps[:]//swipstore[.]cc
🧬 Analysis at: https://urldna.io/scan/6a585f1d3b77500005878e1e
#cybersecurity #phishing #infosec #urldna #scam #infosec

T-Mobile vs Verizon vs AT&T: New report reveals which carrier offers the best 5G experience

All three carriers improved by leaps and bounds, but Verizon still leads the pack.

https://www.androidauthority.com/t-mobile-verizon-att-network-report-ookla-3688072/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Daily Digest | 16 July 2026

Your daily dose of Privacy, Data Protection, AI & Cybersecurity news.

5 stories you should not miss.

Read more: https://www.nicfab.eu/daily-digest/

#Privacy #AI #GDPR #Cybersecurity #TechLaw

Grab a DJI Osmo camera at some of lowest US prices ever

An exclusive sale on AliExpress slashes prices on DJI’s Osmo ultra-compact handheld cameras, bringing them to some of the lowest prices in the U.S.

https://www.tomshardware.com/pc-components/grab-a-dji-osmo-camera-at-some-of-lowest-us-prices-ever

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Possible Phishing 🎣
on: ⚠️hxxps[:]//small-colleagues-736102[.]framer[.]app
🧬 Analysis at: https://urldna.io/scan/6a5897583b77500006bd1be8
#cybersecurity #phishing #infosec #urldna #scam #infosec

🎣 Phishing Spotlight

v0-coinbase-login-page[.]vercel[.]app

🔒 SSL: exp. 2026-09-26
🌐 Stack: Vercel

🔗 https://beesint.com/pulse/24216de9-cc18-4fe3-89fb-224408c927a4

#OSINT #Phishing #ThreatIntel #CyberSecurity